Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-BrK2x8189hIfkzqWa6pp6-464g.roa
File: 1-BrK2x8189hIfkzqWa6pp6-464g.roa (raw, json)
Hash identifier: kezXQ9SMgS5h16ZiXCc9F8xVXsgNmOqwvMXNNDGEgDo=
Subject key identifier: F8:1A:CA:DB:1F:35:F3:D8:48:7E:4C:EA:59:AE:A9:A7:AF:B8:EB:88
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018E1E37B1FDA4031BDAE67279A4B939A2F1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-BrK2x8189hIfkzqWa6pp6-464g.roa
Signing time: Fri 08 Mar 2024 13:19:10 +0000
ROA not before: Fri 08 Mar 2024 13:19:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212049
IP address blocks: 77.90.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1e:37:b1:fd:a4:03:1b:da:e6:72:79:a4:b9:39:a2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 8 13:19:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f81acadb1f35f3d8487e4cea59aea9a7afb8eb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:8e:50:85:95:ea:69:f3:71:51:75:72:d7:
04:23:e7:46:f7:39:c1:ac:9a:38:d9:3b:50:43:5c:
7e:cd:87:3b:95:45:d7:84:4d:e0:71:db:61:e8:8b:
6c:39:a4:b8:0e:42:7e:04:ae:94:20:d0:31:cb:40:
3a:9c:03:13:65:78:79:94:6d:2a:b0:ec:ef:9b:40:
f5:91:d7:44:d0:3d:c7:1e:57:b2:3b:7a:fa:27:67:
e2:b3:b1:c1:aa:57:00:ef:7e:40:89:d7:e5:b3:da:
65:ec:63:52:82:d4:9e:08:03:3f:aa:68:5d:e4:91:
ad:dc:68:3c:eb:9b:cb:e1:53:86:2a:22:94:db:91:
4a:dc:e4:e1:f1:d6:7e:c1:e4:d2:b3:9b:5b:15:31:
88:0f:d2:83:0b:d1:45:b9:df:b4:5c:b5:18:f5:e7:
97:1b:5e:bb:a1:8f:b7:9b:23:82:c9:10:5c:9b:1c:
bd:85:a0:08:8d:b7:43:c6:7d:11:4f:d8:40:36:70:
6b:ce:70:45:00:74:cb:35:e3:32:2b:a9:d7:30:ae:
2d:11:c6:ed:95:a8:2f:1f:a8:56:f5:9c:34:1b:07:
8e:3e:98:bc:98:e1:df:63:8e:ae:d5:66:64:c1:43:
e1:09:ec:0a:0b:a0:5e:c7:d9:97:f7:4b:5e:85:7b:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1A:CA:DB:1F:35:F3:D8:48:7E:4C:EA:59:AE:A9:A7:AF:B8:EB:88
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-BrK2x8189hIfkzqWa6pp6-464g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:22:ba:db:8b:c5:ff:b7:51:c1:cd:64:b1:d9:48:3b:2b:7b:
73:70:51:b0:00:28:89:ce:3d:fb:dd:6f:ec:6f:c5:dc:87:32:
9e:d5:5d:04:81:67:40:bc:44:2f:c9:92:c8:9a:bc:a8:9b:40:
c5:84:64:2f:18:f9:31:da:b3:44:23:01:b0:5e:3c:72:44:5c:
95:e9:8a:a1:54:5d:42:67:2d:ca:47:ed:19:ce:29:91:37:f5:
07:8e:9a:30:37:76:8c:e2:89:2b:d6:d2:b8:84:e7:3a:32:7b:
0b:44:af:2d:84:81:bf:d3:12:6f:93:f0:0a:88:40:7c:3c:dc:
b5:21:47:bc:54:1a:35:26:51:da:a8:de:45:a4:43:3c:a9:fb:
18:8a:a0:e7:d6:62:c7:5d:87:2a:fe:7e:b8:bf:2e:f3:89:b2:
6e:a1:d7:5f:83:a5:43:13:f4:c3:a7:7a:f8:20:b1:7a:49:f5:
65:c7:5a:41:ce:57:9e:c9:49:3f:e6:e5:82:88:f6:36:a7:d2:
6d:69:05:d3:4b:01:56:57:ee:09:83:3d:bd:2c:87:fd:84:e8:
d8:cb:ef:bd:cf:b1:22:f2:c4:59:ab:82:f1:d7:2d:af:94:01:
2a:8f:55:33:9c:da:d0:45:57:f4:62:7f:8f:49:f6:0f:d3:93:
68:9f:96:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:00:14 2024 by rpki-client on console-ams.rpki-client.org